Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/7338b4ac-26f7-3af3-b884-306f20df7819.roa
File:                     7338b4ac-26f7-3af3-b884-306f20df7819.roa (raw, json)
Hash identifier:          Vu1tIEUf8YYt5KsXYccBeulpg3uJok2F8J8OiIj/Dl8=
Subject key identifier:   6D:62:CB:34:12:BA:FA:4D:59:92:DA:7F:65:E6:AA:92:A7:C9:BE:74
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584582A88CF7FFF8A73788E41CA0
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/7338b4ac-26f7-3af3-b884-306f20df7819.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        2620:113:80e0::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8c:f7:ff:f8:a7:37:88:e4:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=448d9692-badc-4703-8968-cf8d06298bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:87:ec:47:cc:6c:94:01:e4:33:a2:0d:4c:
                    22:c3:29:15:e2:b7:32:68:90:d7:e5:82:6c:97:97:
                    9e:06:4e:37:2b:36:6b:17:e7:17:f9:0b:63:77:88:
                    13:44:d5:58:79:b4:c3:4d:e5:d7:8b:26:aa:7c:f2:
                    be:a7:c6:b0:2d:33:d3:2d:2d:27:85:5d:63:bb:55:
                    21:31:7b:d2:12:f9:ef:e5:a3:2d:76:1e:94:21:55:
                    41:a7:82:f7:6d:41:98:b3:5d:18:d8:ed:ab:1c:b4:
                    f0:80:b5:2c:a6:5c:9b:8e:21:0f:b6:62:23:82:d5:
                    87:95:0e:44:95:04:bd:fa:11:79:b7:23:e0:03:dc:
                    97:8e:83:98:7d:f1:25:01:0a:86:db:e5:c7:5c:0e:
                    65:67:dc:aa:72:c3:bc:0b:64:31:04:9a:6a:f4:17:
                    ef:f5:bd:33:4b:c6:44:4a:be:51:91:8a:77:87:ea:
                    42:8c:ae:05:5d:ff:06:75:31:9f:f2:fa:16:92:23:
                    2e:c3:f1:1a:f7:34:0e:c0:f7:1e:0a:67:2b:a6:85:
                    1d:7e:c6:0c:bc:69:18:12:7c:db:48:57:f3:fb:74:
                    8c:b4:58:a3:58:d0:37:f7:79:6f:41:97:7a:2a:74:
                    62:92:61:19:cd:6f:9f:72:0c:bb:b9:27:df:7d:db:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:CB:34:12:BA:FA:4D:59:92:DA:7F:65:E6:AA:92:A7:C9:BE:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/7338b4ac-26f7-3af3-b884-306f20df7819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:80e0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:2e:a3:e2:61:fc:9b:75:7c:77:d6:82:5f:57:b4:fc:3d:
         03:66:16:3a:11:65:e3:fe:88:b4:ac:b9:4d:95:1d:8f:4b:65:
         4e:d2:d2:a7:b8:d8:73:c2:49:bb:43:9a:d5:99:be:93:84:84:
         5e:c5:fc:8b:8e:57:dd:13:ec:00:88:9c:1d:d9:43:82:46:5c:
         5c:d7:40:dd:4f:1c:e6:35:c8:28:53:2f:70:68:a7:9a:17:db:
         25:58:0c:75:ae:13:fe:4d:72:d1:1a:7d:55:8c:a5:bd:0a:ea:
         aa:77:69:04:e2:a3:9f:30:eb:89:38:ab:96:8d:90:a3:52:78:
         8c:6a:cc:2a:f5:c2:57:a6:56:8e:8e:2d:f6:03:cc:dc:d8:02:
         6e:2c:67:4a:71:f0:9b:a7:c7:2a:f9:72:34:13:0c:77:df:09:
         39:2d:84:97:7e:83:77:58:a7:0c:c6:2b:7b:27:e8:2c:46:d0:
         d4:cb:2b:3a:d3:56:5a:46:16:d1:01:69:f9:65:64:93:ef:11:
         33:f5:1e:af:94:05:8d:60:9b:bc:2a:da:fe:62:e7:09:85:fa:
         19:58:8d:8f:a9:d6:da:4d:d7:67:17:84:57:19:23:f1:0c:35:
         a0:15:e6:9d:76:bd:b8:af:94:24:2e:54:93:90:5a:56:b9:0b:
         c2:49:a1:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWCqIz3//inN4jkHKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA0NmE4MDAtYzM3OS00YzNiLWI3MDItZmIxNzEyYjRj
NWM5MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
NDQ4ZDk2OTItYmFkYy00NzAzLTg5NjgtY2Y4ZDA2Mjk4YmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm+H7EfMbJQB5DOiDUwiwykV4rcyaJDX5YJs
l5eeBk43KzZrF+cX+Qtjd4gTRNVYebTDTeXXiyaqfPK+p8awLTPTLS0nhV1ju1Uh
MXvSEvnv5aMtdh6UIVVBp4L3bUGYs10Y2O2rHLTwgLUsplybjiEPtmIjgtWHlQ5E
lQS9+hF5tyPgA9yXjoOYffElAQqG2+XHXA5lZ9yqcsO8C2QxBJpq9Bfv9b0zS8ZE
Sr5RkYp3h+pCjK4FXf8GdTGf8voWkiMuw/Ea9zQOwPceCmcrpoUdfsYMvGkYEnzb
SFfz+3SMtFijWNA393lvQZd6KnRikmEZzW+fcgy7uSfffduzfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG1iyzQSuvpNWZLaf2XmqpKnyb50MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2
YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3MTJiNGM1YzkvNzMzOGI0YWMtMjZmNy0z
YWYzLWI4ODQtMzA2ZjIwZGY3ODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA0NmE4MDAtYzM3OS00YzNiLWI3
MDItZmIxNzEyYjRjNWM5LzIwNDZhODAwLWMzNzktNGMzYi1iNzAyLWZiMTcxMmI0
YzVjOS5jcmwwHwYDVR0jBBgwFoAUG3z6SuVkoJMCTR6fRMJkodj6b6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3
MTJiNGM1YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABE4Dg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHluLqPiYfybdXx31oJfV7T8PQNmFjoRZeP+iLSsuU2VHY9LZU7S
0qe42HPCSbtDmtWZvpOEhF7F/IuOV90T7ACInB3ZQ4JGXFzXQN1PHOY1yChTL3Bo
p5oX2yVYDHWuE/5NctEafVWMpb0K6qp3aQTio58w64k4q5aNkKNSeIxqzCr1wlem
Vo6OLfYDzNzYAm4sZ0px8Junxyr5cjQTDHffCTkthJd+g3dYpwzGK3sn6CxG0NTL
KzrTVlpGFtEBafllZJPvETP1Hq+UBY1gm7wq2v5i5wmF+hlYjY+p1tpN12cXhFcZ
I/EMNaAV5p12vbivlCQuVJOQWla5C8JJoaM=
-----END CERTIFICATE-----
Generated at Thu May 2 15:00:14 2024 by rpki-client on console-ams.rpki-client.org